This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft File: FF96D30557BDACE26C511E1F48A3514643130EA8.mft (raw, json) Hash identifier: RULim3mYeUxGdh8DDdUBPn8dUwrVLSC4oUT/wLxfBVg= Subject key identifier: 6A:F7:88:16:B2:D4:C6:BC:8D:98:02:41:36:EC:45:79:8F:8B:B2:92 Authority key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Certificate issuer: /CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Certificate serial: 56E92497DCBC8511A7EEE53CB5519BFDFB6ADD12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft Manifest number: E2 Signing time: Wed 17 Dec 2025 13:01:33 +0000 Manifest this update: Wed 17 Dec 2025 12:56:33 +0000 Manifest next update: Sat 20 Dec 2025 22:30:33 +0000 Files and hashes: 1: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: ATfPtcSN9IeC66O3vEUygO5SRQOxL5VmkMshCygiymo=) 2: FF96D30557BDACE26C511E1F48A3514643130EA8.crl (hash: CnqTNnI86lt1bYMcDlss4s+l/ZHBcM0JVjpVqc0y5S8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 22:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e9:24:97:dc:bc:85:11:a7:ee:e5:3c:b5:51:9b:fd:fb:6a:dd:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Validity Not Before: Dec 17 12:56:33 2025 GMT Not After : Dec 20 22:30:33 2025 GMT Subject: CN=6AF78816B2D4C6BC8D98024136EC45798F8BB292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:73:6e:ae:27:db:f9:e4:7c:4f:f0:d2:fb:a0: 9f:35:c6:be:1f:d2:7f:59:eb:ee:df:f5:d6:94:05: 79:ae:00:17:cc:9a:0b:2c:10:76:0e:f4:a3:81:65: d4:d3:50:a7:a8:91:6c:e9:43:33:36:97:a1:ae:a7: 19:b4:76:56:60:8c:93:87:74:81:12:97:3f:e0:d6: e5:65:6b:3d:ca:1d:67:31:b7:60:4b:ec:3c:2c:3a: f1:c4:c6:18:2c:8f:ae:58:ea:e4:15:e4:03:cd:8d: c4:c2:5f:7c:f2:d3:a2:1f:fc:d5:ec:0c:20:ae:cf: 42:6c:28:4d:48:87:33:31:23:cc:e4:a6:5a:2b:47: 1b:58:05:83:7f:1b:77:82:f6:77:68:a6:c3:0e:28: 18:55:45:88:e7:96:12:1a:10:b4:03:d3:90:90:14: d3:21:31:1c:9e:c9:9d:36:ff:6b:83:8b:37:42:f2: 06:8b:e8:c6:63:5b:0a:b5:0c:6d:77:12:40:a5:c0: 82:56:71:44:0e:55:da:48:7c:b9:cd:2e:24:0a:60: 2c:19:ea:cf:a6:64:04:d1:e5:92:e9:97:09:ae:fa: 0b:67:c8:62:8c:79:fc:7d:f6:4d:d5:04:a4:15:6c: 41:ba:79:ca:c9:15:1d:50:a3:f5:0e:20:ff:c1:52: 26:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F7:88:16:B2:D4:C6:BC:8D:98:02:41:36:EC:45:79:8F:8B:B2:92 X509v3 Authority Key Identifier: keyid:FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:20:e8:83:15:84:07:89:52:98:9b:9b:31:9d:5b:8b:83:0f: e8:1a:36:6a:96:05:0a:0b:b9:e7:78:14:39:a3:f3:8d:f7:b7: 22:e7:de:fc:47:71:d7:17:10:41:ef:64:18:3a:92:42:83:f7: 7c:a8:b1:09:d1:f0:15:b0:0a:d1:23:85:4f:03:f9:48:a4:6d: 02:8b:bf:65:30:67:0b:a3:02:f1:bb:b1:f5:a1:96:09:57:ad: bd:93:88:9f:aa:ee:f9:1d:17:f9:ea:06:4c:60:1e:a8:8a:5d: 08:b1:03:d8:3d:97:c9:b5:95:58:04:c2:10:d5:84:4f:1e:7b: f3:c2:d1:55:90:68:1e:7b:fc:52:86:12:a0:69:3d:c7:32:bf: d7:4f:c1:28:3e:68:59:9f:f1:ca:aa:73:ac:19:8e:74:3e:e9: 7b:ee:8e:95:83:68:ab:65:5f:86:c1:bb:38:fb:ed:90:b7:64: 7f:fa:7a:c2:5c:87:20:d8:c3:6f:75:d2:16:d7:4f:4d:dd:b2: 85:2c:ed:a1:91:5c:50:a4:0d:8f:40:58:79:ce:cc:a1:24:e3: 62:1c:09:7b:91:c3:c9:07:b2:bf:1a:ef:f9:8b:6c:f5:c3:3b: b8:fa:e3:6b:c6:68:46:44:31:ef:e6:b5:01:05:04:59:a8:1a: 10:54:46:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVukkl9y8hRGn7uU8tVGb/ftq3RIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0 MzEzMEVBODAeFw0yNTEyMTcxMjU2MzNaFw0yNTEyMjAyMjMwMzNaMDMxMTAvBgNV BAMTKDZBRjc4ODE2QjJENEM2QkM4RDk4MDI0MTM2RUM0NTc5OEY4QkIyOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoc26uJ9v55HxP8NL7oJ81xr4f 0n9Z6+7f9daUBXmuABfMmgssEHYO9KOBZdTTUKeokWzpQzM2l6Gupxm0dlZgjJOH dIESlz/g1uVlaz3KHWcxt2BL7DwsOvHExhgsj65Y6uQV5APNjcTCX3zy06If/NXs DCCuz0JsKE1IhzMxI8zkplorRxtYBYN/G3eC9ndopsMOKBhVRYjnlhIaELQD05CQ FNMhMRyeyZ02/2uDizdC8gaL6MZjWwq1DG13EkClwIJWcUQOVdpIfLnNLiQKYCwZ 6s+mZATR5ZLplwmu+gtnyGKMefx99k3VBKQVbEG6ecrJFR1Qo/UOIP/BUibdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaveIFrLUxryNmAJBNuxFeY+LspIwHwYDVR0j BBgwFoAU/5bTBVe9rOJsUR4fSKNRRkMTDqgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMC9GRjk2RDMwNTU3 QkRBQ0UyNkM1MTFFMUY0OEEzNTE0NjQzMTMwRUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0MzEz MEVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUx NDY0MzEzMEVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUg6IMVhAeJUpibmzGdW4uDD+gaNmqWBQoL ued4FDmj8433tyLn3vxHcdcXEEHvZBg6kkKD93yosQnR8BWwCtEjhU8D+UikbQKL v2UwZwujAvG7sfWhlglXrb2TiJ+q7vkdF/nqBkxgHqiKXQixA9g9l8m1lVgEwhDV hE8ee/PC0VWQaB57/FKGEqBpPccyv9dPwSg+aFmf8cqqc6wZjnQ+6XvujpWDaKtl X4bBuzj77ZC3ZH/6esJchyDYw2910hbXT03dsoUs7aGRXFCkDY9AWHnOzKEk42Ic CXuRw8kHsr8a7/mLbPXDO7j642vGaEZEMe/mtQEFBFmoGhBURmI= -----END CERTIFICATE-----Generated at Fri Dec 19 18:11:56 2025 by rpki-client